2010
php-suhosin (0.9.32.1-1) unstable; urgency=low
* New upstream version (Closes: #584509) - Improved random number seed generation more by adding /dev/urandom juice - Fixed missing header file resulting in wrong php_combined_lcg() prototype being used - Added support for memory_limit > 2GB - Fixed missing header file resulting in compile errors * Drop 10_fix_function_prototype, integrated upstream * Update watch file * Bump standards version to 3.9.1, no changes needed
-- Jan Wagner <waja@cyconet.org> Thu, 19 Aug 2010 10:02:52 +0200
php-suhosin (0.9.31-1) unstable; urgency=low
* New upstream version
- Added line ending characters %0a and %0d to the list of dangerous
characters handled by suhosin.server.encode and suhosin.server.strip
- Fixed crash bug with PHP 5.3.x and session module (due to changed session
globals struct)
- Added ! protection to PHP session serializer
- Fixed simulation mode now also affects (dis)allowed functions
- Fixed missing return (1); in random number generator replacements
- Fixed random number generator replacement error case behaviour in PHP
5.3.x
- Fixed error case handling in function_exists() PHP 5.3.x
- Merged changes/fixes in import_request_variables()/extract() from upstream
PHP
- Fixed suhosin_header_handler to be PHP 5.3.x compatible
- Merge fixes and new features of PHP's file upload code to suhosin
- Fix ZTS build of session.c
- Increased session identifier entropy by using /dev/urandom if available
* Install upstream suhosin.ini into /usr/share/doc/php5-suhosin/examples/
* Add dpatch build-infrastructure
* Add 10_fix_function_prototype.dpatch, to fix function prototype, thanks
Stefan Esser (Closes: #539307)
-- Jan Wagner <waja@cyconet.org> Tue, 13 Apr 2010 13:42:29 +0200
php-suhosin (0.9.29-2) unstable; urgency=low
* Update address of the Maintainers List
* Bump Standards-Version to 3.8.4, no changes needed
* Migrate Vcs-Fields over to scm.uncompleted.org
* Add 1.0 to debian/source/format
* Add ${misc:Depends} to dependencies
-- Jan Wagner <waja@cyconet.org> Mon, 15 Mar 2010 21:52:04 +0100
2009
php-suhosin (0.9.29-1) unstable; urgency=low
* New upstream version * update our suhosin.ini * bump standards version to 3.8.3 (no changes needed)
-- Jan Wagner <waja@cyconet.org> Sun, 20 Sep 2009 23:08:24 +0200
php-suhosin (0.9.28-1) unstable; urgency=low
* New upstream version
- Fixed crash bug with PHP 5.2.10 caused by a
change in extension load order of ext/session
(Closes: #538820)
-- Alexander Wirt <formorer@debian.org> Fri, 14 Aug 2009 08:09:56 +0200
2008
php-suhosin (0.9.27-2) UNRELEASED; urgency=low
* add suhosin.srand.ignore and suhosin.mt_srand.ignore with their default
settings to suhosin.ini
* change Section to 'php'
* bump standards version to 3.8.2 (no changes needed)
* add link to documentation into suhosin.ini
* add "Copyright" to packaging copyright to make lintian happy
-- Jan Wagner <waja@cyconet.org> Thu, 16 Oct 2008 16:25:04 +0200
php-suhosin (0.9.27-1) unstable; urgency=low
* new upstream release (closes: #497871) * declare license situation of execute.c in copyright file
-- Jan Wagner <waja@cyconet.org> Wed, 18 Jun 2008 15:16:33 +0200
php-suhosin (0.9.24-1) unstable; urgency=low
* new upstream release * bump copyright of packaging to 2008 and remove trailing whitespaces * Updating standards version to 3.8.0, no changes needed
-- Jan Wagner <waja@cyconet.org> Wed, 18 Jun 2008 13:46:15 +0200
php-suhosin (0.9.23-1) unstable; urgency=low
* new upstream release * fix watch file, since URL changed recently (closes: #459994).
-- Jan Wagner <waja@cyconet.org> Thu, 17 Jan 2008 16:19:36 +0100
2007
php-suhosin (0.9.22-1) unstable; urgency=low
[ Jan Wagner ] * new upstream release (closes: #454382) - Removed LFS warning message because it crashed on several systems - Fixed function_exists() now checks the Suhosin permissions - Fixed crypt() salt no longer uses Blowfish by default - Fixed .htaccess/perdir support - Fixed compilation problem on OS/X - Added protection against some attacks through _SERVER variables - Added suhosin.server.strip and suhosin.server.encode - Added error message that warns about the LFS binary incompatibility * added Vcs- fields, moved Homepage into source header's field * add watch file [ Alexander Wirt ] * Bump standards version * Don't ignore errors from make clean * Update copyright file
-- Alexander Wirt <formorer@debian.org> Thu, 06 Dec 2007 10:53:43 +0100
php-suhosin (0.9.20-1) unstable; urgency=low
* new upstream * remove php4-suhosin (closes: #418321). * ship suhosin.ini with the implizit default values
-- Jan Wagner <waja@cyconet.org> Wed, 23 May 2007 09:04:18 +0200
php-suhosin (0.9.18-1) unstable; urgency=low
[ Jan Wagner ] * new upstream (Closes: #416444) [ Alexander Wirt ] * Fix suhosin.ini comment (Closes: #416111)
-- Alexander Wirt <formorer@debian.org> Thu, 29 Mar 2007 08:27:09 +0200
2006
php-suhosin (0.9.16-1) unstable; urgency=low
* new upstream * removed re2c from builddeps
-- Jan Wagner <waja@cyconet.org> Sun, 3 Dec 2006 21:57:28 +0100
php-suhosin (0.9.12-1) unstable; urgency=low
* new upstream * fixed address of "Free Software Foundation, Inc." in changelog
-- Jan Wagner <waja@cyconet.org> Sun, 17 Nov 2006 15:41:36 +0100
php-suhosin (0.9.11-2) unstable; urgency=low
[ Jan Wagner ] * drop debian/po [ Alexander Wirt ] * Update debian/copyright
-- Alexander Wirt <formorer@debian.org> Sun, 12 Nov 2006 20:09:02 +0100
php-suhosin (0.9.11-1) unstable; urgency=low
[ Jan Wagner ] * New upstream release [ Alexander Wirt ] * Initial debian upload (Closes: #392119)
-- Alexander Wirt <formorer@debian.org> Sat, 11 Nov 2006 11:37:38 +0100
php-suhosin (0.9.10-1) unstable; urgency=low
* New upstream release
-- Jan Wagner <waja@cyconet.org> Thu, 2 Nov 2006 12:50:36 +0000
php-suhosin (0.9.8-1) unstable; urgency=low
* new upstream
-- Jan Wagner <waja@cyconet.org> Tue, 10 Oct 2006 15:46:39 +0200
php-suhosin (0.9.6-2) unstable; urgency=low
* fixed up some po related stuff (make lintian happy)
-- Jan Wagner <waja@cyconet.org> Tue, 10 Oct 2006 15:07:28 +0200
php-suhosin (0.9.6-1) unstable; urgency=low
* Added build depency to re2c (>=0.9.11)
-- Jan Wagner <waja@cyconet.org> Fri, 06 Oct 2006 14:09:37 +0200
php-suhosin (0.9.6-1~cyconet.1) unstable; urgency=low
* Initial release
* Use the config.m4 from the php4 version of the suhosin extension, because
the php4 "phpize" can't cope with one of the tests in the php5 version.
* Use a dirty dpkg-gencontrol hack to make sure php4-suhosin has an epoch.
* Make sure we get our docs in our own doc directory, instead of dumping
them in /usr/share/doc/php[45]-common, in case we're upgrading.
* Use the new php-config[45] --phpapi option, and build-depend on new
enough versions of php[45]-dev to make sure we have it available to us.
* included mbstrings header of php5-5.1.6-1 in buildtree
-- Jan Wagner <waja@cyconet.org> Thu, 05 Oct 2006 14:09:37 +0200